Skip to content
OpenAdvisories
Medium ELSA-2023-6667 4 CVEs

Moderate: samba security, bug fix, and enhancement update (Oracle Linux 9)

Published Nov 11, 2023 · Updated Nov 11, 2023

Summary

evolution-mapi
[3.40.1-6]
- Related: #2190415 (Rebuild against samba 4.18)

openchange
[2.3-41]
- Related: #2190415 (Rebuild against samba 4.18)

samba
[4.18.6-100]
- related: rhbz#2190415 - Update to version 4.18.6
- resolves: rhbz#2211617 - Fix the rpcclient dfsgetinfo command

[4.18.5-100]
- resolves: rhbz#2222895 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968

[4.18.4-102]
- resolves: rhbz#2222883 - Fix trust relationship between workstation and DC

[4.18.4-101]
- resolves: rhbz#2216712 - Fix broken symlink for libwbclient
- resolves: rhbz#2214327 - Fix segfault of winbind child when listing users with winbind scan trusted domains = yes
- resolves: rhbz#2211605 - Fix access of Samba share with veto files = /.*/
- resolves: rhbz#2207692 - Fix Python tarfile extraction to avoid a warning

[4.18.4-100]
- resolves: rhbz#2190415 - Update to version 4.18.4

[4.18.3-100]
- resolves: rhbz#2190415 - Update to version 4.18.3

[4.18.2-101]
- resolves: rhbz#2187313 - Fix weak dependencies in BaseOS

[4.18.2-100]
- resolves: rhbz#2190415 - Update to version 4.18.2

[4.17.5-104]
- related: rhbz#2182163 - Rebuild for liburing rebase to version 2.3

[4.17.5-102]
- resolves: rhbz#2169980 - Fix winbind memory leak
- resolves: rhbz#2156056 - Fix Samba shares not accessible issue

[4.17.5-101]
- resolves: rhbz#2168534 - Create package samba-tools

[4.17.5-100]
- related: rhbz#2131993 - Update to version 4.17.5

[4.17.4-102]
- related: rhbz#2131993 - Create package dc-libs also for 'non-dc build'

[4.17.4-101]
- related: rhbz#2131993 - Rebuild for MIT Kerberos 1.20.1

[4.17.4-100]
- related: rhbz#2131993 - Update to version 4.17.4
- resolves: rhbz#2154373 - Fix CVE-2022-38023
- resolves: rhbz#2143196 - Fix %U include directive for share listing (netshareenum)
- resolves: rhbz#2114884 - Fix id command to return new groups after successful user login
- resolves: rhbz#2154885 - Fix Winbind to retrieve user groups from Active Directory

[4.17.2-103]
- Always add epoch to samba_depver to fix osci.brew-build.rpmdeplint.functional
- related: rhbz#2131993

[4.17.2-102]
- Fix CVE-2022-1615 GnuTLS gnutls_rnd() can fail and give predictable random values
- resolves: rhbz#2126175

[4.17.2-101]
- resolves: rhbz#2131993 - Update to version 4.17.2

[4.16.4-101]
- resolves: rhbz#2121317 - Do not require samba package in python3-samba

[4.16.4-100]
- Rebase to version 4.16.4
- resolves: rhbz#2108332 - Fix CVE-2022-32742

[ 4.16.3-101]
- related: rhbz#2077487 - Rebase Samba to 4.16.3
- resolves: rhbz#2097655 - The pcap background queue process should not be stopped
- resolves: rhbz#2100105 - Fix net ads info LDAP server and LDAP server name

[4.16.2-102]
- resolves: rhbz#2106279 - Fix crash in rpcd_classic

[4.16.2-101]
- resolves: rhbz#2093833 - Fix weak dependency on logrotate
- resolves: rhbz#2096813 - Fix printer displays only after 300 seconds timeout

[4.16.2-100]
- Fix rpminspect abidiff
- related: rhbz#2077487 - Rebase Samba to 4.16.2

[4.16.1-100]
- resolves: rhbz#2077487 - Rebase Samba to the the latest 4.16.x release

[4.15.5-108]
- resolves: rhbz#2078838 - Fix UPNs handling in lookup_name*() calls

[4.15.5-106]
- resolves: rhbz#2065376 - Fix 'create krb5 conf = yes when a KDC has a single IP address.
- resolves: rhbz#2076504 - PAM Kerberos authentication fails with a clock skew error

[4.15.5-105]
- resolves: rhbz#2074891 - Fix username map for unix groups

[4.15.5-104]
- resolves: rhbz#2057500 - Fix winbind kerberos ticket refresh

[4.15.5-103]
- related: rhbz#2044231 - Fix typo in testparm output

[4.15.5-102]
- resolves: rhbz#2044231 - Improve idmap autorid sanity checks and documentation

[4.15.5-101]
- resolves: #2050111 - [RFE] Change change password change prompt phrasing
- resolves: #2054110 - virusfilter_vfs_openat: Not scanned: Directory or special file

[4.15.5-100]
- related: rhbz#2013578 - Rebase Samba to the the latest 4.15.x release
- resolves: #2046129 - Fix CVE-2021-44141
- resolves: #2046154 - Fix CVE-2021-44142
- resolves: #2044405 - Fix printing no longer works on Windows 7
- resolves: #2049485 - Fix systemd notifications
- resolves: #2049604 - Disable NTLMSSP for ldap client connections

[4.15.4-100]
- related: rhbz#2013578 - Rebase Samba to the the latest 4.15.x release
- resolves: #2039154 - Fix CVE-2021-20316
- resolves: #2044238 - Failed to authenticate users after upgrade samba package to release samba-4.14.5-7x
- resolves: #2044239 - [smb] Segmentation fault when joining the domain
- resolves: #2044241 - filename_convert_internal: open_pathref_fsp [xxx] failed: NT_STATUS_ACCESS_DENIED
- resolves: #2044255 - Fix CVE-2021-43566

[4.15.3-1]
- related: rhbz#2013578 - Rebase to Samba 4.15.3
- resolves: rhbz#2028026 - Fix possible null pointer dereference in winbind
- resolves: rhbz#2033317 - Winexe: Kerberos Auth is respected via --use-kerberos=desired

[4.15.2-3]
- related: rhbz#2013578 - Remove unneeded lmdb dependency

[4.15.2-2]
- resolves: rhbz#2019675 - Fix CVE-2020-25717

[4.15.2-2]
- resolves: rhbz#2019669 - Fix CVE-2021-23192

[4.15.2-2]
- resolves: rhbz#2019663 - Fix CVE-2016-2124

[4.15.2-1]
- resolves: rhbz#2013578 - Rebase to Samba 4.15.2

[4.14.5-103]
- resolves: rhbz#1980356 - Fix winbind restart on package upgrade

Fixed packages 36

ReleasePackageFixed in
Oracle Linux · 9 evolution-mapi 0:3.40.1-6.el9
Oracle Linux · 9 evolution-mapi-langpacks 0:3.40.1-6.el9
Oracle Linux · 9 libnetapi 0:4.18.6-100.el9
Oracle Linux · 9 libnetapi-devel 0:4.18.6-100.el9
Oracle Linux · 9 libsmbclient 0:4.18.6-100.el9
Oracle Linux · 9 libsmbclient-devel 0:4.18.6-100.el9
Oracle Linux · 9 libwbclient 0:4.18.6-100.el9
Oracle Linux · 9 libwbclient-devel 0:4.18.6-100.el9
Oracle Linux · 9 openchange 0:2.3-41.el9
Oracle Linux · 9 python3-samba 0:4.18.6-100.el9
Oracle Linux · 9 python3-samba-dc 0:4.18.6-100.el9
Oracle Linux · 9 python3-samba-devel 0:4.18.6-100.el9
Oracle Linux · 9 python3-samba-test 0:4.18.6-100.el9
Oracle Linux · 9 samba 0:4.18.6-100.el9
Oracle Linux · 9 samba-client 0:4.18.6-100.el9
Oracle Linux · 9 samba-client-libs 0:4.18.6-100.el9
Oracle Linux · 9 samba-common 0:4.18.6-100.el9
Oracle Linux · 9 samba-common-libs 0:4.18.6-100.el9
Oracle Linux · 9 samba-common-tools 0:4.18.6-100.el9
Oracle Linux · 9 samba-dc-libs 0:4.18.6-100.el9
Oracle Linux · 9 samba-dcerpc 0:4.18.6-100.el9
Oracle Linux · 9 samba-devel 0:4.18.6-100.el9
Oracle Linux · 9 samba-krb5-printing 0:4.18.6-100.el9
Oracle Linux · 9 samba-ldb-ldap-modules 0:4.18.6-100.el9
Oracle Linux · 9 samba-libs 0:4.18.6-100.el9
Oracle Linux · 9 samba-pidl 0:4.18.6-100.el9
Oracle Linux · 9 samba-test 0:4.18.6-100.el9
Oracle Linux · 9 samba-test-libs 0:4.18.6-100.el9
Oracle Linux · 9 samba-tools 0:4.18.6-100.el9
Oracle Linux · 9 samba-usershares 0:4.18.6-100.el9
Oracle Linux · 9 samba-vfs-iouring 0:4.18.6-100.el9
Oracle Linux · 9 samba-winbind 0:4.18.6-100.el9
Oracle Linux · 9 samba-winbind-clients 0:4.18.6-100.el9
Oracle Linux · 9 samba-winbind-krb5-locator 0:4.18.6-100.el9
Oracle Linux · 9 samba-winbind-modules 0:4.18.6-100.el9
Oracle Linux · 9 samba-winexe 0:4.18.6-100.el9

Vulnerabilities 4